Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1D1B24018D6EAA1A8D365203389A27054F1AFE3C.cer
File:                     1D1B24018D6EAA1A8D365203389A27054F1AFE3C.cer (raw, json)
Hash identifier:          D40ZFPrg/ogaVrXAFg9zOmtaHQF8aXs8W+GCEeG2D3U=
Subject key identifier:   1D:1B:24:01:8D:6E:AA:1A:8D:36:52:03:38:9A:27:05:4F:1A:FE:3C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       17D0C289140B7BFC5493DB1F028D05DB0799BB08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/1D1B24018D6EAA1A8D365203389A27054F1AFE3C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Mar 2026 12:52:11 +0000
Certificate not after:    Tue 16 Mar 2027 12:57:11 +0000
Subordinate resources:    AS: 263483
                          IP: 191.242.224.0/22
                          IP: 2804:128c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 00:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:d0:c2:89:14:0b:7b:fc:54:93:db:1f:02:8d:05:db:07:99:bb:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 17 12:52:11 2026 GMT
            Not After : Mar 16 12:57:11 2027 GMT
        Subject: CN=1D1B24018D6EAA1A8D365203389A27054F1AFE3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f6:82:90:82:f1:fe:9a:0e:fe:f0:35:7e:b8:
                    24:d3:dd:d4:a8:a5:48:6c:02:59:1f:ea:a7:65:a7:
                    cd:09:0b:3e:cc:90:a1:8a:f4:73:81:49:da:1b:f2:
                    a8:22:c3:94:d4:bf:9f:23:62:3f:52:22:30:73:bc:
                    35:3a:a8:82:78:6f:61:f2:22:05:32:1c:64:91:f5:
                    4e:e6:a3:7f:1d:ba:35:e6:d4:28:fc:c4:92:d4:ac:
                    6a:50:30:ed:79:bc:fa:8f:0a:48:0f:bd:d5:24:e0:
                    21:a5:7a:af:9e:3b:01:6d:e0:86:11:5c:11:16:7e:
                    44:c6:59:15:9f:6a:67:36:0b:da:9e:90:cd:d9:ed:
                    e1:21:98:99:12:94:c8:b0:a0:08:e8:1f:34:2d:b1:
                    65:bf:ab:49:28:95:82:ed:7b:e1:9d:a9:97:ec:52:
                    50:d1:b6:c2:12:77:55:94:93:09:88:c4:8f:c1:3a:
                    c8:06:42:fd:70:44:da:5c:8b:51:02:56:cc:76:ea:
                    d2:8a:53:5c:52:01:e6:fd:cf:e4:3c:37:0b:f3:fc:
                    da:2e:98:40:7c:39:2e:27:5a:d1:79:64:60:82:cc:
                    dd:07:8e:d9:fd:b9:0d:96:d9:b9:09:3e:6c:3a:80:
                    28:91:96:aa:61:29:60:e1:01:6a:a4:f1:a5:ab:c3:
                    1d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:1B:24:01:8D:6E:AA:1A:8D:36:52:03:38:9A:27:05:4F:1A:FE:3C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/1D1B24018D6EAA1A8D365203389A27054F1AFE3C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.224.0/22
                IPv6:
                  2804:128c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263483

    Signature Algorithm: sha256WithRSAEncryption
         59:d3:8c:a6:19:59:b3:c3:f4:fc:61:2a:9c:30:f2:2c:2f:d4:
         7e:fb:e3:5c:e0:82:4f:45:84:15:df:ff:23:83:50:e7:6a:60:
         07:85:d0:e3:1d:d4:24:f3:c4:31:5b:e2:ee:b9:77:01:f0:ff:
         ff:3e:99:9f:f8:01:72:06:76:1b:ea:8d:df:1e:ab:6d:31:fe:
         cb:1d:c3:be:ef:3c:2a:8a:1f:1d:da:e2:0b:21:32:27:80:5a:
         b7:df:2a:bf:b7:14:e8:e3:5c:d0:81:ec:70:57:8c:71:41:c7:
         31:aa:9d:65:b2:c2:7e:fe:88:23:71:3f:ae:d5:4e:4a:ac:d6:
         28:80:07:fd:22:3e:67:dd:50:f1:ee:9b:a7:9d:fd:ba:7e:58:
         fe:bb:fe:e2:5d:19:55:c0:e1:56:27:2a:76:29:79:a3:4a:13:
         c2:d6:a8:71:7a:4f:01:5c:32:cf:c2:e1:80:48:c9:3c:3e:72:
         5f:ae:96:19:87:2d:04:5f:ac:82:45:25:d8:cc:ee:28:e7:f6:
         7a:18:a9:9c:91:0b:e0:17:4c:a8:b1:80:fe:b5:7f:f8:c0:74:
         ee:1c:4c:ab:9d:f1:b2:0d:22:48:6a:b0:a3:63:24:7e:46:12:
         47:af:6f:93:b5:cd:c0:a3:45:8a:df:14:26:95:6f:d8:d8:f4:
         f9:ef:3d:2e
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUF9DCiRQLe/xUk9sfAo0F2weZuwgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjAzMTcxMjUyMTFaFw0yNzAzMTYxMjU3MTFaMDMxMTAvBgNV
BAMTKDFEMUIyNDAxOEQ2RUFBMUE4RDM2NTIwMzM4OUEyNzA1NEYxQUZFM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN9oKQgvH+mg7+8DV+uCTT3dSo
pUhsAlkf6qdlp80JCz7MkKGK9HOBSdob8qgiw5TUv58jYj9SIjBzvDU6qIJ4b2Hy
IgUyHGSR9U7mo38dujXm1Cj8xJLUrGpQMO15vPqPCkgPvdUk4CGleq+eOwFt4IYR
XBEWfkTGWRWfamc2C9qekM3Z7eEhmJkSlMiwoAjoHzQtsWW/q0kolYLte+GdqZfs
UlDRtsISd1WUkwmIxI/BOsgGQv1wRNpci1ECVsx26tKKU1xSAeb9z+Q8Nwvz/Nou
mEB8OS4nWtF5ZGCCzN0Hjtn9uQ2W2bkJPmw6gCiRlqphKWDhAWqk8aWrwx2/AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQdGyQBjW6qGo02
UgM4micFTxr+PDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR0RZ
M2YzRGZOazhtdG1BaUhxOGpRN1R6c2dBY0JITnZQbkNmS3VOZFVtNzgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dE
WTNmM0RmTms4bXRtQWlIcThqUTdUenNnQWNCSE52UG5DZkt1TmRVbTc4LzAvMUQx
QjI0MDE4RDZFQUExQThEMzY1MjAzMzg5QTI3MDU0RjFBRkUzQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCv/LgMA0EAgACMAcDBQAoBBKMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQFOzANBgkqhkiG9w0BAQsFAAOCAQEAWdOMphlZs8P0/GEq
nDDyLC/UfvvjXOCCT0WEFd//I4NQ52pgB4XQ4x3UJPPEMVvi7rl3AfD//z6Zn/gB
cgZ2G+qN3x6rbTH+yx3Dvu88KoofHdriCyEyJ4Bat98qv7cU6ONc0IHscFeMcUHH
MaqdZbLCfv6II3E/rtVOSqzWKIAH/SI+Z91Q8e6bp539un5Y/rv+4l0ZVcDhVicq
dil5o0oTwtaocXpPAVwyz8LhgEjJPD5yX66WGYctBF+sgkUl2MzuKOf2ehipnJEL
4BdMqLGA/rV/+MB07hxMq53xsg0iSGqwo2MkfkYSR69vk7XNwKNFit8UJpVv2Nj0
+e89Lg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:58:56 2026 by rpki-client